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Top Stories 

• Puget Sound Energy and Seattle City Lights reported 1 1 1,000 customers were without 
power August 30 after a powerful windstorm knocked out power for at least 250,000 
Seattle residents and thousands more in Oregon August 29. - KING 5 Seattle (See item 2) 

• An 8-mile stretch of Interstate 101 in Burlingame was shut down for 18 hours after a crane 
operated by Caltrans contractor struck a high-voltage tower, causing the tower to collapse 
and power lines to fall across the highway August 28. - Associated Press (See item 10) 

• Graham, Washington-based Kapowsin Meats expanded a recall August 27 to include an 
additional 523,380 pounds of its pork products due to possible Salmonella contamination. - 
U.S. Department of Agriculture (See item 19) 

• Officials shut off taps, showers, and closed the kitchen at San Quentin State Prison in 
California after 6 inmates tested positive for Legionnaires’ disease and over 50 others 
showed symptoms beginning August 27. - Los Angeles Times (See item 28) 
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Energy Sector 



1. August 30, San Francisco Chronicle; News and Sentinel - (West Virginia) Ruptured 
line cause of oil spill in Ritchie County creek. Approximately 1,200 barrels of oil 
leaked from a ruptured oil gathering line owned by West Virginia Oil Gathering August 
27, spilling an undetermined amount of oil into a Ritchie County creek. The line was 
shut down and the creek was dammed as part of a cleanup effort, which may take 
several weeks to complete. 

Source: http://www.sfgate.com/news/science/article/Ruptured-line-cause-of-oil-spill- 
in-Ritchie-6474584.php 

2. August 30, KING 5 Seattle - (Washington; Oregon) Some customers will be without 
power until Tuesday. Puget Sound Energy and Seattle City Lights reported 1 1 1,000 
customers were without power August 30 after a powerful windstorm with winds 
reaching 87 mph knocked out power for at least 250,000 Seattle residents and 
thousands more in Oregon August 29. Two deaths were reported as a result of the 
storm, and officials warned it could take until September 1 to restore power to all 
customers. 

Source: http://www.king5.corn/storv/weather/2015/08/30/storm-power- 
outages/7 1 424 188/ 

3. August 30, WILX 10 Onondaga - (Michigan) Three skimmers found in two days. 
Michigan authorities are investigating the State’s 4700 gas pumps after inspectors 
found 7 skimming devices installed in August, including 3 over a 2-day period in Perry 
and Owosso. 

Source: http://www.wilx.com/home/headlines/Three-Skimmers-Found-in-Two-Days- 
323290731.html 

4. August 29, Associated Press - (Wyoming) Wyoming Ethanol to suspend operations. 
The Wyoming Ethanol plant in Torrington announced an “indefinite suspension of 
operations” will take place the week of August 31 due to falling gasoline prices. About 
20 workers will be affected by the closure. 

Source: http://www.kulr8.com/storv/29914076/wyoming-ethanol-to-suspend- 
operations 

5. August 29, Wilmington News Journal - (Delaware) 3 hospitalized after Delaware 
City Refinery leak. All employees of Delaware City Refinery were evacuated August 
28 and 3 workers were taken to surrounding hospitals following an unidentified 
chemical release for symptoms of headache, dizziness, lethargy, and weakness. 

Source: http://www.delawareonline.com/story/news/local/2015/08/29/refinerv-spill- 
iniuries/71317314/ 

6. August 28, Reuters; St. Louis Post-Dispatch - (Illinois) Gasoline unit restarted at 
Phillips 66 Wood River refinery. Phillips 66’ s Wood River refinery in the Metro East 
area of St. Louis, Illinois, was restarted August 28 after a fluid catalytic cracking unit 
was shut down August 25 due to a collapsed cooling tower which forced the refinery to 
cut back on its production of gasoline, jet fuel, and diesel. The outage did not 
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immediately impact regional gasoline prices. 

Source: http://www.stltodav.com/business/local/gasoline-unit-restarted-at-phillips- 
wood-river-refinery/article f78df5fd-e706-512d-86fc-212e89cll5c9.html 

For another story, see item 15 

Chemical Industry Sector 

Nothing to report 

Nuclear Reactors, Materials, and Waste Sector 

Nothing to report 

Critical Manufacturing Sector 

7. August 28, The Oregonian/OregonLive - (Oregon) Early morning fire at NE 
Portland plastics plant extinguished. Portland authorities were investigating the 
cause of a 2-alarm fire at Fullbore Innovations August 28, after the fire burned a hole 
through a second-story floor. The cause of the fire remains under investigation. 

Source: 

http://www.oregonlive.com/portland/index.ssf/2015/08/early morning fire at ne portl 
.html 



Defense Industrial Base Sector 

Nothing to report 

Financial Services Sector 

8. August 28, Associated Press - (International) 5 charged in $30 million investment 
pyramid scheme. Five suspects were indicted August 27 for an investment pyramid 
scheme in which Hong Kong -based companies purportedly ran online children’s 
education courses, but instead solicited $30 million in investments from Chinese- 
Americans in Los Angeles, San Francisco, and New York. 

Source: http://www.mercurvnews.com/califomia/ci 28720410/5-charged-30-million- 
investment-pyramid- scheme 

9. August 28, Reuters - (New Mexico) New Mexico’s prosecutor charges State official 
with embezzlement. New Mexico’s Secretary of State was charged August 28 with 
embezzlement, money laundering, and campaign finance violations after an 
investigation revealed that she withdrew over $430,000 from bank accounts at 8 New 
Mexico casinos from 2013-2014, and authorities allege that she used campaign 
contributions for personal gain. 

Source: http://www.reuters.com/article/2015/08/29/usa-corruption-new-mexico- 
idUSLlNl 1400W20150829 
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Transportation Systems Sector 



10. August 30, Associated Press - (California) Closure planned for Bay Area freeway hit 
by power lines. An 8-mile stretch of Interstate 101 in Burlingame was shut down for 
about 18 hours after a crane operated by Caltrans contractor struck a high-voltage 
tower, causing the tower to collapse and power lines to fall across the highway August 
28. One lane reopened August 29, but authorities reported that another closure will 
occur from August 30 to August 31. 

Source: http://www.washingtontimes.com/news/2015/aug/30/bav-area-freeway-closed- 
for-8-miles-by-downed-powe/ 

11. August 29, Associated Press - (Colorado) Flight from Vegas to Germany diverted 
over unruly passenger. A Condor Airlines international flight from Las Vegas to 
Frankfurt, Germany, made an emergency landing at Denver International Airport 
August 29, due to an in-flight emergency caused by a disturbance on the plane. The 
plane landed safely and the flight was delayed overnight, while passengers were put in 
hotels. 

Source: http://abcnews.go.com/US/wireStorv/fbi-investigates-international-flight- 
diverted-33402917 



12. August 29, Syracuse.com - (New York) Man in critical condition after crash that 
overturned rig on 1-81 in Syracuse. A portion of Interstate 81 in Syracuse was shut 
down for more than 7 hours August 29 while crews responded to an accident after a 
driver of a UPS truck lost control and overturned, sending the driver to a local hospital. 
Source: 

http://www.svracuse.com/crime/index.ssf/2015/08/man in critical condition after era 
sh that overturned rig on i-81 in syracuse.html 

13. August 28, Washington Post - (Washington, D.C.) Report: Metro derailment 
occurred after technician disregarded rail defect. The Washington Metropolitan 
Area Transit Authority released a report August 28 stating that the cause of an August 6 
derailment resulted from a failure of the transit agency’s quality check process, in 
which a technician disregarded a rail defect found by a track-inspection machine 
several weeks before the accident occurred. 

Source: http://www.washingtonpost.com/local/trafficandcommuting/report-rnetro- 
derailment-occurred-after-technician-disregarded-rail-defect/2015/08/28/d714ccbe- 
4d86-l Ie5-84df-923b3efla64b story.html 

Food and Agriculture Sector 

14. August 31, Associated Press - (Texas; Alabama) Blue Bell resumes selling ice cream 
after listeria recall. Blue Bell Creameries resumed selling its products August 31 at 
select stores in Texas and Alabama following the company’s April recall after 10 
reported cases, including 3 deaths, from listeria were linked to Blue Bell products. 
Source: http://www.msn.com/en-us/news/us/blue-bell-resumes-selling-ice-cream-after- 
listeria-recall/ar-AAdNAKm 
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15. August 30, KM1Z 17 Columbia - (Missouri) Fire engulfs Missouri Better Bean plant 
in Bunceton. Missouri Better Bean officials reported August 29 that its Bunceton plant 
sustained extensive damage after a fire began inside of the plant, prompting 
surrounding residents to evacuate the area while fire crews spent several hours 
extinguishing the flames. 

Source: http://www.abcl7news.com/news/breaking-fire-engulfs-methanol-plant-in- 
bunceton/34994 1 22 



16. August 29, KSL 5 Salt Lake City - (Utah) Security breach affecting 10K Utah Food 
Bank donors. Utah Food Bank officials stated August 29 that a July security breach on 
its Web site may have compromised the personal information including names, 
addresses, emails, credit or debit card numbers, and security codes for more than 
10,000 donors. Security experts corrected the vulnerability and additional security 
measures were put into place after donors were urged to change their passwords. 

Source: http://www.ksl.com/index.php?sid=36250205&nid=148&title=security-breach- 
affecting- lOk-utah-food-bank-donors&s cid=queue-7 

17. August 28, Bakersfield Californian - (California) Reported pesticide sickness 
prompts massive response from emergency workers. Kem County officials reported 
August 28 that 33 people were treated and decontaminated after being exposed to 
Danitol, a chemical insecticide, while working on a solar farm in the Los Hills area. 
Authorities are investigating how the workers became exposed to the fumes after first 
responders received reports of around 70 people who had symptoms of vomiting and 
bloody noses. 

Source: http://www.bakersfield.com/news/breaking-news/2015/08/28/up-to-40-people- 
sickened-by-crop-duster-spray-in-lost-hills.html 

18. August 28, U.S. Department of Agriculture - (Washington) Real Foods recalls 
chicken wrap products due to misbranding and undeclared allergen. Kent, 
Washington-based Real Foods issued a recall August 28 for 41 pounds of its chicken 
wrap products packaged in 9.5 ounce plastic tray packages due to misbranding and 
undeclared soy and sulfites after a retail store discovered that the back label mistakenly 
listed the product as “Turkey Pesto Wrap.” The product was shipped to retail locations 
in Washington. 

Source: http://www.fsis.usda.gov/wps/portal/fsis/topics/recalls-and-public-health- 
alerts/recall-case-archive/archive/201 5/Recall- 116-2015-release 



19. August 28, U.S. Department of Agriculture - (National) Kapowsin Meats recalls pork 
products due to possible Salmonella contamination. Graham, Washington-based 
Kapowsin Meats expanded a recall August 27 to include an additional 523,380 pounds 
of its pork products due to possible Salmonella contamination following an initial 
August 13 recall that identified 152 patient cases of Salmonella illness linked to the 
consumption of Kapowsin Meats. The products were produced from April 18 - August 
26 and shipped to retail stores nationwide. 

Source: http://www.fsis.usda.gov/wps/portal/fsis/topics/recalls-and-public-health- 
alerts/recall-case-archive/archive/201 5/recall- 110-2015-release-expansion 
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Water and Wastewater Systems Sector 

20. August 30, Associated Press - (New Mexico) Boil water advisory lifted for system 
near Santa Fe. The New Mexico Environment Departments Drinking Water Bureau 
lifted a boil water advisory for a system in Santa Fe County August 29 when water 
samples were found clear of E.coli after an advisory was issued August 27 when E.coli 
was detected in repeat drinking water samples from each system. 

Source: http://www.washingtontimes.com/news/2015/aug/30/boil-water-advisorv- 
lifted-for-system-near-santa-f/ 

21. August 29, Charlotte Observer; Rock Hill Herald - (North Carolina) Water 
restrictions declared in Union County after fuel spills into the Catawba. Union 
County, North Carolina residents were asked August 29 to conserve water after a fuel 
from a fatal wreck in South Carolina spilled into the Catawba River upstream from a 
treatment plant that supplies the county’s drinking water August 28. 

Source: http://www.charlotteobserver.com/news/local/article32738742.html 

For additional stories, see items 1 and 38 

Healthcare and Public Health Sector 

22. August 28, Los Angeles Times - (California) Doctor known as ‘Candy Man’ 
convicted of trafficking in pain medications. A Federal jury convicted a Santa 
Barbara doctor who operated the Family Medical Clinic August 28, for writing 
prescriptions for painkillers such as OxyContin and Dilaudid without legitimate 
medical purpose, attributing to 20 deaths from overdoses. 

Source: http://www.latimes.com/local/california/la-me-0829-doctor-convicted- 
20150829-story.html 



23. August 28, WGEM 10 Quincy - (Illinois) Health department: Two dead from 
Uegionnaires’ disease at Illinois Veterans Home in Quincy. The Illinois Department 
of Veterans announced August 28 that 2 veterans at the Illinois Veterans Home in 
Quincy died after contracting Fegionnaires’ disease, and that at least 8 other cases were 
confirmed after lab testing. Officials are investigating the source of the outbreak. 
Source: http://www.wgem.com/storv/29909009/2015/08/28/health-department-23- 
cases-of-legionnaires-disease-now-confirmed 

For another story, see item 28 

Government Facilities Sector 

24. August 31, KGO 7 San Francisco - (California) Classes cancelled at Two Uos Gatos 
schools after fire. Foma Prieta Elementary School and CT English Middle School in 
Eos Gatos were closed August 31 due to a garbage can fire in front of a building used 
by the school district that houses the Foma Prieta school district facilities office, tech 
support office, community meeting room, and a sheriff’s substation. Schools are 
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scheduled to reopen September 1. 

Source: http://abc7news.com/news/two-alarm-fire-forces-closure-of-two-los-gatos- 
schools/963477/ 



25. August 31, KRTV 3 Great Falls - (Montana) Spotted Eagle Fire explodes to 50,000 
acres, more evacuations ordered. Crews worked August 31 to contain the 50,000- 
acre Spotted Eagle Fire burning in Heart Butte, which prompted evacuation orders for 
Swift Dam, Birch Creek, and surrounding areas. 

Source: http://www.krtv.com/storv/29918533/spotted-eagle-fire-explodes-to-50000- 
acres-more-evacuations-issued 

26. August 31, KFSN 30 Fresno - (California) Rough Fire at more than 72,000 acres, 25 
percent containment. Crews reached 25 percent containment August 31 of the 72,300- 
acre Rough Fire burning in Fresno County. Several roads and recreation areas remained 
closed. 

Source: http://abc30.com/news/rough-fire-at-more-than-6600Q-acres-25-percent- 
containment/960198/ 



27. August 28, KXAN 36 Austin - (Texas) Police: City employee stole $176,000 of city- 
owned computer equipment. A former City of Austin employee was arrested and 
charged August 28 with allegedly stealing and pawning 65 pieces of commercial-grade, 
city-owned technology worth over $176,000. Investigators used a pawn-activity 
database to track the former employee who worked as an IT support analyst for the 
city. 

Source: http://kxan.com/2015/08/28/police-citv-emplovee-stole-176000-of-citv-owned- 
computer-eq uipment/ 

For another story, see item 39 

Emergency Services Sector 

28. August 30, Los Angeles Times - (California) Several San Quintin prison inmates 
have tested positive for Legionnaires’ disease. Officials shut off taps, showers, and 
closed the kitchen at San Quentin State Prison in California after 6 inmates tested 
positive for Legionnaires’ disease and over 50 others showed symptoms beginning 
August 27. All visitation and volunteer programs were temporarily suspended while 
authorities investigate the source of the infection. 

Source: http://www.latimes.com/local/lanow/la-me-ln-san-quentin-20150830- 
story.html 



29. August 29, Wausau Daily Herald - (Wisconsin) Wood Co. 911 system outages 

resolved. Service was fully restored following 8 hours of intermittent outages August 
29 for the Wood County 9-1-1 system, which was caused by a cut Solarus fiber optic 
cable. Officials reported that no emergency calls were disrupted during the outage. 
Source: http://www.stevenspointioumal.com/storv/news/local/2015/08/29/wood- 
countv-911-system-experiencing-outages/7 1383232/ 
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For another story, see item 17 

Information Technology Sector 

30. August 31, IDG News Service - (International) Russian-speaking hackers breach 97 
Web sites, many of them dating ones. Security researchers from Hold Security 
discovered that hackers breached 97 Web sites between July - August after analysts 
found batches of stolen information including a list of Web sites and their 
vulnerabilities, notes, and large lists of email addresses and unencrypted passwords. 
Source: http://www.computerworld.com/article/2977464/security/russian-speaking- 
hackers-breach-97-websites-many-of-them-dating-ones.html#tk.rss security 

31 .August 31, IDG News Service - (International) ‘KeyRaider’ iOS malware targets 
jailbroken devices. Security researchers from Palo Alto Networks discovered that 
hackers have compromised over 225,000 Apple user accounts using malware called 
KeyRaider to target jailbroken devices. The malware steals account usernames, 
passwords, device identification codes, certificates, private keys, and purchase receipts, 
and was also observed being used as ransomware. 

Source: http://www.computerworid.com/article/2977467/securitv/keyraider-ios- 
malware-targets-iailbroken-devices.html#tk.rss security 

32. August 31, Securityweek - (International) Vulnerability allowed hackers to hijack 
Smartsheet accounts. Smartsheet patched an insecure direct object reference 
vulnerability in its cloud application that could have allowed an attacker to hijack user 
accounts via the software’s “import users” feature. The application is used by over 
65,000 businesses and 5 million users worldwide. 

Source: http://www.securityweek.com/vulnerabilitv-allowed-hackers-hiiack- 
smartsheet-accounts 

33. August 31, Softpedia - (International) Hackers linked to Russian government 
impersonate EFF Web site to spread malware. Google security researchers 
discovered that hackers affiliated with Operation Pawn Storm were using spear 
phishing emails purporting to be from an Electronic Frontier Foundation domain to 
deliver a recently discovered Java zero-day exploit that would inject the affected 
system with Sednit malware. 

Source: http://ncws.softpcdia.com/ncws/hackcrs-linkcd-to-russian-govcrnmcnt- 
impersonate-eff-website-to-spread-malware-490473.shtml 

34. August 31, The Register - (International) Cisco ISE carries HTMF authentication 
bug. Cisco discovered a vulnerability in its Identity Services Engine (ISE) in which an 
attacker could exploit a lack of access control for uploaded HyperText Markup 
Language (HTML) files to see custom pages an administrator has created, which can 
include sensitive network and security information. 

Source: 

http://www.theregister.co.uk/2015/08/31/cisco ise carries html authentication bug/ 

35. August 31, Securityweek - (International) IBM warns of new CoreBot stealer. 



- 8 - 



Security researchers at IBM discovered a new threat dubbed “CoreBot” that uses a 
modular plugin system to steal local data from Web browsers, applications, File 
Transfer Protocol (FTP) clients, email clients, and other software after setting up a key 
in the Microsoft Windows Registry to maintain persistence. The malware also contains 
a domain generation algorithm (DGA), and can download and execute other threats 
through Windows PowerShell. 

Source: http://www.securitvweek.com/ibm-warns-organizations-new-corebot-stealer 

Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 



Communications Sector 

See item 31 

Commercial Facilities Sector 

36. August 31, Rochester Democrat and Chronicle - (New York) Officials investigate 
downtown high-rise blaze. Forty residents from the Buckingham Commons apartment 
complex in Rochester were displaced following an August 30, 4-alarm fire that 
damaged the rooftop and several floors of the high-rise building. Fire officials are 
investigating the cause of the fire and why smoke detectors throughout the complex 
were not activated. 

Source: http://www.democratandchronicle.com/story/news/2015/08/30/firefighters- 
scene-fie-buckingham-commons/7 141 4546/ 

37. August 31, Chicago Sun-Times - (Illinois) Fire destroys family-owned Lincoln 
Square Lanes: ‘I just don’t believe it.’ Officials reported that the Lincoln Square 
Lanes bowling alley in Chicago was destroyed by an extra- alarm fire August 31, and 
that the fire may have begun in the grill. 

Source: http ://www .fox32chicago.com/ne ws/local/ 141 72220-story 

38. August 29, Times of Northwest Indiana - (Indiana) Water line break, sinkhole, leads 
to theater evacuation. AMC’s Showplace 16 in Schererville was evacuated and closed 
until further notice August 29 after a water line break caused a sinkhole in its parking 
lot, damaging two vehicles and flooding a section of the lot. 

Source: http://www.nwitimes.com/news/local/lake/schererville/water-line-break- 
si nkhole-leads-to-theater-evacuation/arficle 26882b40-0e35-568 1 -S8f 1 - 
b469b7 6 1 a 1 9c .html 

39. August 29, WCTI 12 New Bern - (North Carolina) Students displaced after water 
leak near ECU. About 30 students from a private apartment building near East 
Carolina University in Pitt County were displaced due to a water leak August 29. The 
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university transported the displaced students while officials investigated the cause of 
the leak. 

Source: http://www.wctil2.com/news/30-students-displaced-after-water-leak-near- 
ecu/34994698 

Dams Sector 



Nothing to report 



- 10 - 



NTAS 

NUi Terror hm Mklw»cy Sy*itm 

NO ACTIVE ALERTS 
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Department of Homeland Security (DHS) 

DHS Daily Open Source Infrastructure Report Contact Information 

About the reports - The DHS Daily Open Source Infrastructure Report is a daily [Monday 
through Friday] summary of open-source published information concerning significant critical 
infrastructure issues. The DHS Daily Open Source Infrastructure Report is archived for 10 days on 
the Department of Homeland Security Web site: http://www.dhs.gov/lPDailvReport 

Contact Information 

Content and Suggestions: Send mail to cikr.productfeedback@hq.dhs.gov or contact the DHS 

Daily Report Team at (703) 942-8590 

Subscribe to the Distribution List: Visit the DHS Daily Open Source Infrastructure Report and follow 

instructions to Get e-mail updates when this information changes . 

Removal from Distribution List: Send mail to support @ govdelivery.com . 



Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert. gov . 

Department of Homeland Security Disclaimer 

The DHS Daily Open Source Infrastructure Report is a non-commercial publication intended to educate and inform 
personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
material. 
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